Senior Security Operations Engineer

Senior Security Operations Engineer

Are you a cybersecurity professional with a passion for safeguarding critical data and a knack for implementing cutting-edge security solutions? We’re seeking a highly skilled Senior Security Operations Engineer to join a dynamic organization committed to standardizing security across its enterprise. If you thrive in fast-paced environments, have a strong security background, and are eager to make a tangible impact, this opportunity is for you!

Overview
As a Senior Security Operations Engineer, you will be instrumental in fortifying our security posture and implementing best practices across multiple organizational units. Your expertise will help drive security initiatives, refine incident response processes, and ensure compliance with industry standards such as SOX, FERPA, and COPPA. Located ideally in the local area (with flexibility), you will be ready to respond swiftly in urgent situations, ensuring the safety and privacy of sensitive data within a hybrid environment. This role demands a heavy background in security operations and hands-on experience with enterprise security tools, cloud environments, and compliance frameworks.

Required Skills

• Minimum of 5+ years in cybersecurity operations or security engineering within cloud-native SOC environments
• Extensive experience with Amazon Web Services (AWS): IAM, CloudTrail, GuardDuty, VPC security
• Proficiency with application security tools such as Checkmarx, Snyk, Veracode for Static Application Security Testing (SAST) and Software Composition Analysis (SCA)
• Strong scripting skills in Python, PowerShell, or Bash for automation of security tasks
• Familiarity with identity management platforms like Ping Identity, Okta, including SAML, OIDC, and OAuth protocols
• Proven ability to monitor, triage, and investigate security alerts across cloud, endpoints, and SaaS systems
• Excellent communication skills to articulate risks and collaborate across technical teams
• Experience with vulnerability management, incident response, and disaster recovery strategies

Nice to Have Skills

• Certifications such as CISSP, AWS Certified Security Specialty, GIAC (GCIH, GCIA, GCDA)
• Experience within the EdTech sector or environments emphasizing data privacy (FERPA, COPPA, HIPAA, SOC2)
• Knowledge of Infrastructure as Code (IaC) security tools, e.g., Terraform scanning
• Exposure to compliance standards and frameworks relevant to student data privacy and cybersecurity best practices

Preferred Education and Experience

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (Master’s preferred)
• Demonstrated success in implementing security standards and processes at an organizational scale
• Prior experience working with or supporting compliance with SOX, FERPA, COPPA, and other regulatory frameworks

Other Requirements

• Location: Preferably local or within reasonable proximity for onsite critical incident support (candidate may work remotely but must be able to respond quickly if needed)
• Availability for 2-3 rounds of interviews, with Tuan Pallie involved in the process
• Willingness to engage in cross-team collaboration in a hybrid/remote setup

Compensation for this role is targeted between $120,000 to $140,000, with potential for higher offers based on experience and qualifications. We are committed to finding the right candidate to strengthen our security foundation.

DeWinter Group and Maris Consulting is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. We post pay scales which are based on our client pay ranges. DeWinter, Maris, and our clients have the right to modify the requirements of the role which can impact the pay ranges posted.